Behavioral task
behavioral1
Sample
ef71c9c4670205398d4b7937f5f2498f_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ef71c9c4670205398d4b7937f5f2498f_JaffaCakes118
-
Size
257KB
-
MD5
ef71c9c4670205398d4b7937f5f2498f
-
SHA1
af6601b12fb96903dfbdfe9be30750fc7ac1116b
-
SHA256
36787779630dbc9a8a62099387f9541b6cc98db05cc8c5ce10d41892cf39ae9a
-
SHA512
35d8d4917171aad114a6c18e9a9c8d0d2bc4cd14d358d3ea0c1e6a7eac885eb39e5f7eef97a9c1ed2e32be1c430a5658a408fed4e295c9f825a477a9f088b793
-
SSDEEP
6144:Ab+G4B1qBhWste4wmZ0nRvStn9pazG+JwHa5hb8x:Wy1SwstMy0RatbMG+Jw65ho
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef71c9c4670205398d4b7937f5f2498f_JaffaCakes118
Files
-
ef71c9c4670205398d4b7937f5f2498f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 336KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
khmzcsj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE